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Data storage, management, and delivery method 

Verfahren zur Lagerung, Verwaltung und Auslieferung von Daten 
Methode de stockage, de gestion et de livraison de donnees 
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663-8005, (JP) 
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061-3211, (JP) 
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Dr. Elisabeth Jung Dr. Jurgen Schirdewahn Dipl.-Ing. Claus Gernhardt 
(100421), Clemensstrasse 30, 80803 Munchen, (DE) 
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EP 1146453 A3 011107 
APPLICATION (CC, No, Date) : EP 2001107262 010323; 

PRIORITY (CC, No, Date) : JP 2000100032 000331; JP 2000100033 000331 
DESIGNATED STATES: DE; GB 

EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 
INTERNATIONAL PATENT CLASS: G06F-017/60 
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Figure number on first page: 1 

LANGUAGE ( Publication, Procedural , Application) : English; English; English 
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SPEC A (English) 200142 24416 

Total word count - document A 27408 
Total word count - document B 0 
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.SPECIFICATION way, every doctor working at the hospital A and having a 
personal ID can freely access any object or information owned by the 
hospital A. 

The storage list contains only the customer ID of the hospital A 
(personal IDs ... customer ID is found, the storage system grants the user 
request, and if there is no matching customer ID , rejects the user 
request . 

By combining a password , hard key, etc., greatly enhanced security 
can be achieved (63) . 

If a third party attempts ... hospital A requested once in September the 
analysis of an X-ray photograph by a doctor X ( see the record 
"Analysis { doctor X)", and the storage system charges the fee to the 
hospital A. A detailed procedure ... embodiment , however, since the 
identification label 72 is always included in the bit mapped image data 
, the doctor at the hospital A never fails to see the identification 
label on the image data when he or she analyzes the bit mapped. . . 
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00986997 +*Image available** 

MEDICAL SERVICE AND PRESCRIPTION MANAGEMENT SYSTEM 
SERVICE MEDICAL ET SYSTEME DE GESTION DES PRESCRIPTIONS 

Patent Applicant /Assignee : 

RX-CONNECT INC, 3515 Harbor Blvd., Mail Stop LC07138, Costa Mesa, CA 
92626, US, US (Residence), US (Nationality) 
Inventor (s) : 

JAY Richard, 4 6 Mancera, Rancho Santa Margarita, CA 92688, US, 
GRANT David, 22391 Rosebriar, Mission Viejo, CA 92692, US, 

Legal Representative : 

DELANEY Karoline A (agent), Knobbe, Martens, Olson & Bear, LLP, 620 
Newport Center Drive, Sixteenth Floor, Newport Beach, CA 92660, US, 

Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200317166 Al 20030227 (WO 0317166) 

Application: WO 2002US10549 20020403 (PCT/WO US0210549) 

Priority Application: US 2001281390 20010403; US 2001336907 20011107 

Designated States: AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU 
CZ (utility model) CZ DE (utility model) DE DK (utility model) DK DM DZ 
EC EE (utility model) EE ES FI (utility model) FI GB GD GE GH GM HR HU ID 
IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ 
NO NZ OM PH PL PT RO RU SD SE SG SI SK (utility model). SK SL TJ TM TN TR 
TT TZ UA UG UZ VN YU ZA ZM ZW 

(EP) AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR 

(OA) BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW 

(EA) AM AZ BY KG KZ MD RU TJ TM 
Publication Language: English 
Filing Language: English 
Fulltext Word Count: 48819 

Main International Patent Class: G06F-017/60 
Fulltext Availability: 
Detailed Description 

Detailed Description 

server 1 1 6 or the point-of-care device 1 1 2 to directly access 
the information from the health plan database 104 and the PBM 
database 106. 

Referring to the middle portion of FIGURE ... including treatment by the 
other doctors, and all of the health plan data and PBM data with each 
health plan. Because the doctor side components have access to the- 
health plan databases 104 and PBM databases 106 for the multiple health 
plans ... patient point of care. 

The system involves the ability of the healthcare provider to 
have access . to an enormous variety of information, including 
drugs, prescription information , -patient histories, health 
plan information , charge capture and billing information, 
reference materials, and other materials that would facilitate 
the diagnosis ... navigate the system and search for the desired 
information . 



The practitioner preferably is able to access and print 

patient medical information and drug information - The patient 

medical information and drug history information is updated 
regularly to provide the practitioner with the most recent ... problems at 
the point of service. The 

administrative management feature of the invention preferably 

includes access to the patient, Is health plan information , 

including the covered drug list, the preferred drugs within 

the formulary, and the specific formularies ... desirably is connectable to 
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the doctor's server in order that the device has appropriate access to 
scheduling and other information for the doctor and his patients. The 
mobile device and its software modules are discussed in greater detail 
below. 

5 1 

SUBSTITUTE SHEET (RULE 26) 

In order for the mobile device to access the information upon the 

doctor 's server as well as transmit information to the various other 

systems (...patients may have a 

65 • ' 

SUBSTITUTE SHEET (RULE 26) 

variety of health care providers, the access to the various web 
servers and health plan data allows for all of the information about 
that patient to be accessible and to be. . .and chooses the drug. 

He then chooses "Renew" and the "Rx History Details" are shown ( see 
Figure 20j). The Doctor verifies the prescription information and 
submits the prescription. The information is submitted to a mail order 
pharmacy and Tracy... list (National Drug Data File - NDDF) and an 
accompanying 

database and application that allow easy access to the healthcare 
industry's standard source of drug information , that includes clinical 
, descriptive and pricing information for every drug product approved 
by the FDA. Features, 

include: drug-drug ...Ing information shall be captured at the Physle!Ws 
Office Mobile Application Database. 

Prescriber 
Prescriber ID 
Password 

Active 
Date 

Non -Prescriber 
Non -Prescriber ID 
Password 

Active 
Date 

inactive Date 
Group Registration 
NJ 

Group ID 
Location ID 
-Group Name 
-Group Address. . . 
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PERMISSION BASED MARKETING FOR USE WITH MEDICAL PRESCRIPTIONS 

SYSTEME DE MARKETING BASE SUR L 1 AUTORI SAT ION DESTINE A ETRE UTILISE AVEC 
DES ORDONNANCES MED I GALES 

Patent Applicant /Assignee : 

RX-CONNECT INC, 3515 Harbor Blvd., Mail Stop LC07138, Costa Mesa, CA 
92626, US, US (Residence), US (Nationality) 
Inventor (s) : 

JAY Richard, 46 Mancera, Rancho Santa Margarita, CA 92688, US, 
GRANT David, 22391 Rosebriar, Mission Viejo, CA 92692, US, 

Legal Representative: 

DELANEY Karoline A (agent), Knobbe, Martnes, Olson & Bear, LLP, 620 
Newport Center Drive, Sixteenth Floor, Newport Beach, CA 92660, US, 

Patent and Priority Information (Country, Number, Date) : 
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Patent: WO 200286655 A2-A3 20021031 (WO 0286655) 

Application: WO 2002US10767 20020403 (PCT/WO US0210767) 

Priority Application: US 2001281390 2*0010403; US 2001336907 20011107 
Designated States: AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH' CN CO CR CU 
CZ (utility model) CZ DE (utility model) DE DK (utility model) DK DM DZ 
EC EE (utility model) EE ES FI (utility model) FI GB GD GE GH GM HR HU ID 
IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ 
NO NZ OM PH PL PT RO RU SD SE SG SI SK (utility model) SK SL TJ TM TN TR 
TT TZ UA UG UZ VN YU ZA ZM ZW 

(EP) AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR 

(OA) BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW 

(EA) AM AZ BY KG KZ MD RU TJ TM 
Publication Language: English 
Filing Language: English 
Fulltext Word Count: 48215 



Main International Patent Class: G06F-017/60 
Fulltext Availability: 
Detailed Description 



Detailed Description 

server 1 1 6 or the point-of-care device 1 1 2 to directly access" 
the information from the health plan database 104 and the PBM 
database 106. 

Referring to the middle ...including treatment by the other doctors, 
and all of the health plan data and PBM data with each health plan. 
Because the doctor side components have access to the health plan 
databases 104 and PBM databases 106 for the multiple health plans... 
patient point of care. 

The system involves the ability of the healthcare provider to 
have access to an enormous variety of information, including 
drugs, prescription information , patient histories, health 
plan information , charge capture and billing information, 
reference materials, , and other materials that would facilitate 
the diagnosis ... navigate the system and search for the desired 
information . 

The practitioner preferably is able to access and print 

patient medical information and drug information . The patient 

medical information and drug history information is updated 
regularly to provide the practitioner with the most recent ... problems at 
the point of service. The 

administrative management feature of the invention preferably 
includes access to the patient's health plan information ,, 
including the covered drug list, the preferred drugs within 
the formulary,.' and the specif ic formularies ... desirably is connectable 
to the doctor's server in order that the device has appropriate access 
to scheduling and other information for the doctor and his patients. 
The mobile device and its software modules are discussed in greater 
detail below. 

50 

In order for the mobile device to access the information upon the 
doctor ! s server as well as transmit information to the various other 
systems (as will be... be noted that although patients may have a 
64 

variety of health care providers, the access to the various web servers 
and health plan data allows for all of the information about that 
patient to be accessible and to be ...and chooses the drug. 

He then chooses "Renew" and the "Rx History Details" are shown ( see 
Figure 20j). The Doctor verifies the prescription information and 
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submits the prescription. The information is submitted to a mail order 
pharmacy and Tracy... list (National Drug Data File - NDDF) and an 
accompanying 

database and application that allow easy access to the healthcare 
industry's standard source of drug information , that includes clinical 
, descriptive and 

pricing information for every drug product approved by the FDA. 
Features 

include: drug-drug interaction screening; allergy ... Date of Birth 

GroupID PRIMARY 

Location ID 

Active 

Date 

Inactive Date 
143 

Non-Prescriber 
VC. 

Non -Prescriber ID 
Password 

User lype 

Last 

First 

Middle 

Address 

Gqy ' 

State 

Phon 

Group ID 
Location ID 
Active 

Date . . . Inactive Date 
Non-Prescriber 

0 I E 0 NIMES W -99 Mt VA WN 3 
Non -Prescriber ID 
Password 

Active 
Date I 

Inactive Date 
roup Registration 
V, ; V 
Ix -,r 
or e 

P35--M. . . 
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PAT IENT -CONTROLLED AUTOMATED MEDICAL RECORD, DIAGNOSIS , AND TREATMENT 
SYSTEM AND METHOD 

DOSSIER MEDICAL INFORMAT I SE COMMANDE PAR LE PATIENT, AINSI QUE SYSTEME ET 
PROCEDE DE TRAITEMENT ET DE DIAGNOSTIC 

Patent Applicant /Inventor : 

MARCHOSKY J Alexander, St. Luke's Medical Building South, 224 South Woods 
Mill Road, Suite 610 South, Chesterfield, MO 63017, US, US (Residence), 
US (Nationality) 
Legal Representative: 
■ KINNEY Anthony R (et al) (agent), Senniger, Powers, Leavitt & Roedel, One 

Metropolitan Square, 16th Floor, St. Louis, MO 63102, US, 
Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200208941 Al 20020131 (WO 0208941) 

Application: WO 2001US22687 20010719 (PCT/WO US0122687) 
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Priority Application: US 2000219773 20000720 
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KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD 

SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW 

(EP) AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR 

(OA) BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZW 

(EA) AM AZ BY KG KZ MD RU TJ TM 
Publication Language: English 
Filing Language: English 
Fulltext Word Count: 21493 

Main International Patent Class: G06F-017/00 
Fulltext Availability: 

Detailed Description 

Claims 

Detailed Description 

records are essentially "owned" by an individual patient who grants or 
denies varying degrees of access to the records to selected health 
care professionals based on the health care prof essionaPs field of 
specialty and need to know. . . 

...is engendering reevaluation of the roles of patients and health care 
providers with regard to access and content of medical records . 

Long term relationships and trust between a family doctor and patient are 
no longer commonplace. . . 

. . . inf onnation . Additionally, a patient cannot prevent or control private 
information contained within the patient's medical record from being 
seen by any individual that has access to medical records , 
regardless of whether the individual has any right or need to review a 
particular portion ... the potential medical specialty from which to seek 
assistance, and control the content of and - access to the individual's 
medical record . 

A self-generated record of present illness and pertinent infonnation 
would also 1 5 benefit... 

...individual medical records could be owned by individual patients. Thus, 
patients may authorize or deny access to their medical and 
biographical records or limit access to only portions of their 
medical record to specific health care professionals thereby 
controlling privacy of the patient and confidentiality of the patient's 
medical ... 

...records database that contains data that is entered by the patient, the 
provision of a medical. records database wherein individual patients 
authorize selected medical professionals* access to selected medical 
infonnation contained in their medical records , the provision of a 
medical records database wherein patients authorize, confirm or 1 0 edit 



.which can be accessed by health care professionals selectively 
authorized by the patients wherein the access is controlled by a 
security program. The medical and biographical records database is 
accessible through the use of "one or more computers connected to the 
global ... 

.remotely from the central computer. A software program interface 
provides the authorized health care professionals access to the 
medical history and biographical information from the patient medical 
and biographical records database and pem-iits affitional patient 
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medical history and biographical information to be input into. . . 

...biographical records database through the remotely situated computer. A 
security prograin is executed which limits access to the medical and 
biographical records database to individual patients entering medical 
and biographical infonnation into their own records and to... 

...and biographical information to the patients' records. The execution of 
a security program also limits access to the medical and biographical 

records database to the individual 1.0 patients retrieving medical and 
biographical information from their own ... illustrating a security program 
of the invention for verifying an individuaPs identity and authority to 
access a medical and biographical record . 

Fig. 3 illustrates exemplary relative weighting values assigned to 
answers of diagnostic questions for a... 

...to a global computer network 104 (e.g., the Internet). Central computer 
102 also has access to a medical and biographical records database 
106 that contains a plurality of medical and biographical records 112 for 
individual patients... 

...104 are a plurality of patient computers 108 and health care computers 
110. 

Patients obtain access to their medical and biographical records by 
accessing central computer 102 via* patient computers 108 connected to 
global computer network 104.- Central computer 102 executes security 
program 114 that limits access to medical and biographical database 106 
and individual medical and biographical records 112 contained 
therein. Once a patient's identity is verified by security program 114, 
the patient may gain access to his or her own individual medical and 
biographical record 112. 

Similarly, health care providers obtain access to patients medical 
and biographical records by accessing central computer 1 02 via health 
care computers 110 connected to global computer network 104. Central 
computer 102 executes security program 114 to limit access to medical 
and biograpf f ical database 106 and individual medical and biograpf f ical 

records 112 contained therein to health care providers that are 
authorized by a patient to access the particular patienfs medical and 
biographical record 112. 

Additionally, individuals, whether patients, health care providers, or 
simply individuals interested in inquiring about... in total. For example, 
a female patient may provide a family doctor with authorization to 
access general health infonnation in her folio but prevent her family 
doctor from accessing information she permits only heir gynecologist to 
review . 

While the present invention contains medical and biographical... 
...the present invention is the ability for patients, and the people that 
they authorize, to access medical and biographical information 
stored in a patient's folio regardless of the affiliation of the patient 
or the. .. invention: registration; identification; a security process and. 
system to. allow or deny accessibility to the medical and biographical 
records ; entry of medical history; recording infonnation in medical 

and biographical records (e.g., medical history; physical 
examination; anatomical, biochemical, physiological, pathological, and 
laboratory tests; and radiology and imaging infonnation... 

...or biometric key perraits the patient or an individual authorized by the 
patient to obtain access to the folio containing the patient's recorded 

medical and biographical data . Additional security procedures of the 
present invention may be implemented such as requiring reentry of... 
health care provider or a patient. Once entered into the individual 
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health care provider archive, access is granted to each one of the 
f^les the health care provider registrant has generated or stored in 
medical and biographical records database 106. The... 

.not the patient, controls access to the health care provider's patient 
records. 

3 5 Access to each one of the patient records in the medical aud 
biograpf f ical records database requires re-identification of the health 
care provider (by whichever measure is established by. . . 

.care provider) before opening the individual file. This additional step 
circumvents the possibility of unauthorized access to the files of 
the medical and biographical records database if it is inadvertently 
left open by the health care provider. 

The system 100 ... 

.invention of a security process and system used to ensure that only 
authorized individuals gain access to data stored in medical and 
biographical records 112. Data elements of the system, hardware of the 
present invention are physically separated to... 

.112' or that the individual has been authorized by the owner of one of 
the medical and biographical records 112 to access the record. At 
step 206, the individual enters the login information. Central computer 
102, at... credit card, on which all of the identifying infonnation may be 
stored. The patient's PIN or biometrics identification is not to be 
stored on the magnetic strip card. Rather, this identifier is preferably 
supplied separately. 

.available electronic consultant that is available to individuals who 
have access to a computer with access to computer network 104. Similar 
to the medical . and biographical record database 106, the medical 
diagnostic program 116 would reside on central computer 102 connected to 
network 104. While individual ... data acquisition and/or interactive 
interview or inquiry. Directed data acquisition 1 0 represents all data 
acquired by the medical diagnostic program from direct entry of 
information, and not by interactive interview. Examples include 
vaccinations, birth and developmental data, previous... 

.to the health care professional and also be approved by the health care 
professional for entry into the health care provider's medical and 
biographical record for the patient. 

The program 116 obtains infonnation from an individual through an 
interactive interview ... insurance providers. 

In one aspect of the insurance processing enibodiment, an insurance 
provider is given access to review a patient's medical and 
biographical record . The insurance provider's contractual criteria for 
coverage is compared to the medical treatment claimed. . . 

.aim 

global network, said patient computers each executing a software 
program interface for patients to input medical history and 
biographical information into the patient medical and biographical 
records database and to authorize health care professionals to access 
at least a portion of the records of the 
1 5 authorizing patients; 
d. one . . . 

.care computers each executing a software program interface for the 
authorized health care professionals to access the medical history 
and biographical information from the patient medical and 
biographical records database and to input additional patient medical 
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history and biographical information into the patient medical... 

.permitting a patient to* limit the extent and type of infonnation in the 
patient's record that authorized health care professionals may 
access . 3 . The medical and biograpf f ical records system of claim 2, 
wherein the security program is responsive to the patient selectively 
limiting the extent and type of information that- the authorized health 

care professional may access based upon relevancy of the information 
to the specialty of the health care professional. 

4 . . . 

.of information based upon a degree of confidentiality assigned by the 
patient to the different medical and biographical information stored 
in the patient's record for limiting access of the health care 
professionals to the infonnation. 

5 The medical and biographical records system of claim 2, wherein the 
security program identifies and records all inquiries to access 
records in the medical and biographical records database.' 

6 The medical and biographical records system of claim 2, wherein the 
security program identifies and records the health care professionals... 

.records for a plurality of individual patients, said central computer 
executing a security program limiting access to the records to 
health care providers controlling the patient medical and biographical 

records and to health care professionals selectively 
authorized, by the health care providers; 
C. one or more health care... 

.interface for health care providers to input medical history and 
biographical infonnation into the patient medical and biographical 
records database and to authorize health care professionals to access 
at least a portion of the records of the authorizing record owners; and 
15... 

.professional computers each executing a software program interface for 
the authorized health care professionals to access the medical history 
and biographical infonnation from the patient medical ■ and biographical 
records database and to input additional patient medical history and 
biographical information into the patient medical... 

.health care provider to limit the extent and type of infonnation in the 
patient's record that authorized health care professionals may 
access . 

9 The medical and biographical records system of claim 8, wherein, 
the security program is responsive to the health care provider... 

.based upon a degree of confidentiality assigned by the health care 
provider to the different medical and biographical information stored 
in the patienfs record for limiting access of the health care 
professionals to the infonnation. 

11 The medical and biographical records system of claim 8, wherein 
the security program identifies and, records all inquiries to access 
records in the medical and biographical records database. 

12 The medical and biographical records system of claim 8, wherein 
the security program identifies and records the health care professionals 



.through the computer remotely 
situated from the centralized computer; 

d. executing a security program limiting access to the medical and 
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biographical records database to the individual patients inputting 
medical, and biographical infonnation into ...and biographical 
infon-nation to the patients 1 records; and 

e. executing a security program limiting access to the medical and 
biographical records database to the individual patients retrieving 
medical and 

biographical infonnation from their own records and. . . 

..the step of selectively limiting the extent and type of information in a 
patient's record that authorized health ciare professionals may 
access . 16. * The method of claim 15, wherein the step of selectively 
limiting the extent and type' of information includes flirther limiting 
the extent and type of information that authorized health care 
professionals may access based upon relevancy of the infonnation to the 

•specialty of the health care professional. 

17... the patient's request. 

36 The method of claim. 14, wherein the security program limits access 
to the medical and biographical- records database to health care 
■providers inputting or retrieving medical and. biographical information 
into their own patient records and. . . 
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are used in situations where the personal identification device is not 

validating properly or the customer has missed a random password 
question . 

The private information includes the custoiner's credit card numbers, 
debit card numbers, bank... be accessible to two different personal 
identification devices. For example, when a doctor needs, to access a 
customer's medical records in an emergency and the customer is 
unable to approve the transaction, an encryption decrypt ion ... of the 
setup that is asked now to authenticate the signatory. If the one-time 
pass - word , the signatory's name or business 1 5 name do not match, 
the personal identification device does not activate, and a new 
activation code is mailed or delivered to the signatory and assigned ... of 
the setup that is asked now to authenticate the merchant signatory. If 
the onetime password , the merchant signatory's name or business name 
do not match, the personal identification device does not activate, 
and a new activation code is mailed or delivered to the merchant 
signatory and. . . 
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Detailed Description 
Detailed Description 

... is effecting communication with users via the Internet. Additionally, 
the prior art systems also make access of health and prescniption 
records kept by the pharmacy company difficult to access by the end 
users since no integration exists between the Internet network server and 
the. . . 

...Hence, there is a need for a method and apparatus that affords more ease 
of access to prescription arid health history records kept by the 
particular pharmacy company. 

BRIEF DESCRIPTION OF THE DR 
AWfNGS 

FICYLire I Illustrates ... a prescription number, which 'is parilcular to 
the .users specific prescription to be refilled. If no recorded 
personal identification number has been entered, flow proceeds to 
7 

block f ) 12 where it is deterriiined whether or ... decision block 512 
where it is determined whether or not the user has entered a personal 
identification number . If not the customer is prompted to review the 
order details in block 516. If no personal identification number 

was entered then the user is prompted to review the order details without 
inforination concerning... 
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learning to use the Internet in search of 
information and commerce. Consumers can now gain access to information 

pertaining to various health related matters, ranging from alternative 
medicine and therapy, support groups and healthcare related commerce, 
e...FIG. 2. Specifically, the information and/or services under "My 
Health" 202, include but are not limited to: member identification 
(i.e., login, password , name, etc.)/ health interest health history, 
health related 

products used, prescription- drug orders (active and... 
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Detailed Description 

... as the Internet and large database managers, have made it practical to . 
have a national medical record database where a health care 
provider could easily and immediately access a patient f s medical 
records prepared by any entity at any time. Access can be over a 
public network such as the Internet using web browser technology. The... 

...the national medical database. 

It is thus desirable that a more secure way of controlling access to a 
record such as, e.g., a medical record , be provided. 

Summary of the Invention 

A feature of the present invention is a system. .. drawings, wherein. 
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FIG. I is a block diagram showing an example workflow providing a patient 
access, to 

a medical record by using an ID code and a biometric code; 

FIG. 2 is a block diagram. . . 

...example workflow with enhanced security 
features; 

FIG. 3 illustrates another workflow method for providing patient medical 
record 

access with additional securitv features, and 
FIG. 4 illustrates yet another patient medical record access method 
having security features. 

Detailed Description of a Preferred Embodiment of the Invention 
The preferred. .. record can be sent back to the requesting individual with 
the original ID code for identification proposes. No < other 
identifiable information, including the special access code 204, need 
be transmitted back. After the individual record is downloaded and has 
been used. . . 

...can be sent back to the requesting individual with the original ID code 
104 for identification proposes. No other identifiable information, 
including the special access code 320, need be transmitted back. 
After the individual record is downloaded and has been used... added 
benefit to researchers, such as, e.g., epidemiological and clinical 
medical researchers in a medical records database, who can be given 
access to the central database 216 and 316 without risk of identifying 
particular individuals since any. . . 
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Detailed Description 

... in the industry to provide a method for developing 

the information highway to allow for access b to shared medical files 
in an enlarged health network and other external databases in order 
to increase the number of available sources of... the system with that ID 
(mapped by 

the validation table). If either the user's ID is not known to the 
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system, or the password given is incorrect, validation will fail 
and the. user refused possibility of logging on to ... physician, at a 
ho'spital external to the NDMSR system's integrated 
health network, to have access to the individual's pertinent and 
most recent medical information , the only requirement being that 
the hospital must have the appropriate electronic means to read. . . 
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METHOD FOR AFFORDING A MARKET SPACE INTERFACE BETWEEN A PLURALITY OF 
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MARKET SPACE INTERFACE 

PROCEDE DE MISE A DISPOSITION D» UNE INTERFACE D'ESPACE DE MARCHE ENTRE UNE 
PLURAL I TE DE FABRI CANTS ET DES FOURNISSEURS DE SERVICES ET GESTION 
D 'UNE INSTALLATION VIA UNE INTERFACE D'ESPACE DE MARCHE 
Application: WO 2000US32308 20001122 
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DIALOG (R) File 349: (c) 2003 WIPO/Univentio. All rts. reserv. 

00804456 

APPARATUS AND METHOD FOR ACCESSING PHARMACY INFORMATION AND ORDERING 
PRESCRIPTIONS 

DISPOSITIF ET PROCEDE PERMETTANT D 1 ACCEDER A DES INFORMATIONS 
PHARMACE UT I QUE S ET DE COMMANDER DES ORDONNANCES 

Application: WO 2000US31550 20001115 
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DIALOG (R) File 349: (c) 2003 WIPO/Univentio. All rts. reserv. 

00794340 

METHOD, APPARATUS AND SYSTEM FOR PROVIDING HEALTH MANAGEMENT RESOURCES AND 

PHARMACY SERVICES TO CONSUMERS 
PROCEDE, APPAREIL ET SYSTEME OFFRANT DES RESSOURCES DE GESTION SANITAIRE ET 

DES SERVICES DE PHARMACIE AUX CONSOMMATEURS 

Application: WO 2000US28156 20001012 
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DIALOG (R) File 349: (c) 2003 WIPO/Univentio. All rts. reserv. 

00563450 

A SYSTEM FOR PROTECTION OF UNAUTHORIZED ENTRY INTO ACCESSING RECORDS IN A 
RECORD DATABASE 

SYSTEME DE PROTECTION CONTRE LES ACCES NON AUTORISES AUX DOSSIERS D ! UNE 
BASE DE DONNEES 

Application: WO 99US26090 19991104 
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STRUCTURED FOCUSED HYPERTEXT DATA STRUCTURE 
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5892461 INSPEC Abstract Number: B9805-6210L-155, C9805-5620W-096 
Title: Security on the Internet: authenticating the user 

Author (s) : Botting, J. 

Journal: Telecommunications (International Edition) vol.31, no. 12 
p. 77-8 

Publisher: Horizon House Publications, 

Publication Date:. Dec. 1997 Country of Publication: USA 

CODEN: TLCOAY ISSN: 0040-2494 

SICI: 004 0-24 94 (199712) 31: 12L. 77: SIAU; 1-C 

Material Identity Number: L873-98001 

Language: English 

Subfile: B C 

Copyright 1998, IEE 

Abstract: One of the most commonly used forms of security today is the 
password . In recent years, however, unidentified hackers have deployed 
password gathering programs over the Internet which have succeeded in 
tens and thousands of passwords being. . . 

...text. Although Internet 'break-ins 1 have received most of the publicity, 
the problem of illegal access is ubiquitous across networks of all types, 
especially corporate intranets, local area networks and wide... 

24/3, K/8 (Item 2 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2003 Institution of Electrical Engineers. All rts. reserv. 

03385478 INSPEC Abstract Number: C89039882 
Title: Evaluating an intelligent gateway: a methodology 

Author(s): van Brakel, P. A. 

Author Affiliation: Dept. of Lib. & Inf. Sci . , Pretoria Univ., South 
Africa 

Journal: South African Journal of Library and Information Science 
vol.56, no. 4 p. 277-90 

Publication Date: Dec. 1988 Country of Publication: South Africa 
CODEN: SALSE7 ISSN: 0256-8861 
Language: English 
Subfile: C 

Abstract: The gateway concept implies a commercial venture which provides 
the user with single access to multiple online search services. 
Specifically, the intelligent gateway enables the user to search the 
databases from various online hosts (vendors) without the necessity of 
having a password or user ID for each system without knowledge of the 
command language for each system. The author investigates the question of 
how. . . 
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(c) 2003 Info. Today Inc. All rts. reserv. 

00483245 98PI01-021 

Web server with a smile — O'Reilly's WebSite Professional 2.0 delivers 
a full -featured and intuitive Web server for your intranet 

Lipschutz, Robert P 

PC Magazine , January 6, 1998 , vl7 nl p52, 1 Page(s) 
ISSN: 0888-8507 

Company Name: O'Reilly & Associates 
URL: http://www.oreilly.com 
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Product Name: WebSite Professional 

IP address • if they use browsers that use the HTTP host header. The 
program allows anonymous access or can be configured to require user 
name and password protection. The package includes a Web editor and tools 
for developing dynamic Web sites. The... 
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23/3 ,K/1 (Item 1 from file: 149) 
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(c) 2003 The Gale Group. All rts. reserv. 

01484335 SUPPLIER NUMBER: 15572934 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Traveling the new information highway. (Editorial) 

Lincoln, Thomas L. 

JAMA, The Journal of the American Medical Association, v271, n24, pl955(2) 
June 22, 
•1994 

DOCUMENT TYPE: Editorial PUBLICATION FORMAT: Magazine/ Journal ISSN: 

0098-7484 'LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

TARGET AUDIENCE: Professional 

WORD COUNT: 1454 LINE COUNT: 00121 

. . .ABSTRACT: community has enhanced access to information worldwide and 
has also. raised concerns over confidentiality. Internet allows almost 
instantaneous access to studies, records and reports regardless of 
geographic proximity. It also allows physicians and clinicians... 

radically new medical record in which digitized images and sound 
will augment encounter documents and patient data sets. As such clinical 
records come into existence, the information highway will become an... 

...shadow of everyday health care use, significant new policy issues arise 
concerning the confidentiality of patient information. [5] In the highly 
automated future era, patient data will be available to an increasingly 
large number of people who are not bound. . . 

...are encrypted for privacy, authorities want "trapdoors" so that, under 
suitable legal constraints, they can monitor , decode, and read them. At 
the extreme, there are proposals that these constraints should not require 
a court .. .General Accounting Office publication GAO/IMTEC-92-68BR. 
Obtainable by: ftp ftp.cpsr.org login: anonymous password : 
you@your . internet . address , cd cpsr, cd privacy, cd wiretap, get 
gao-report-digital- telephony. 



23/3, K/2 (Item 1 from file: 15) 

DIALOG (R) File 15 : ABI /Inform (R) 

(c) 2003 ProQuest Inf o&Learning . All rts. reserv. 
01871059 05-22051 

Fundamentals and trade-offs of IT security 

Larochelle, Bob 

Health Management Technology v20n7 PP: 18-21 Aug 1999 
ISSN:' 1074-4770 JRNL CODE: CIH 
WORD COUNT: 1802 

...TEXT: electronically with partners, clients, and others outside the 
organization. The heightened expectations of providers and patients and 
the needs to increase efficiency and cut costs are driving these healthcare 
organizations to. . . 

. . . gets the attention it deserves is physical access to machines that 
contain sensitive information. Physical access should be limited to 
qualified administrators. Protection against fire, theft, and disaster is 
important in ensuring a reliable... 

...Web sites such as Amazon.com that allow a user to specify user id and 
password anonymously , HCFA requires that courier, • phone, or ter 

outcomes and lower costs. It may also of fer ... Later, risk adjustment and 
additional grouping techniques can be applied to assign diagnostic 
categories to patients and even create disease' management categories for 
patients to monitor over time. 
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Assigning Categories 

Inf oMedtrics is designing advanced statistical techniques based on DCG. . . 

... or episode. This lays the foundation for the identification and 
development of COEs. 

After categorizing patients and assigning them to diagnostic and cost 
categories, the formal COE process is undertaken. Organizations... 



23/3,K/3 (Item 2 from file: 15) 

DIALOG (R) File 15 : ABI/Inf orm (R) 

(c) 2003 ProQuest Inf o&Learning . All rts. reserv. 

01340452 99-89848 
A take-home test 

Rouland, Renne Covino 

Discount Merchandiser v36nl2 PP: 54-59 Dec 1996 
ISSN: 0012-3579 JRNL CODE: DMD 
WORD COUNT: 2234 

...ABSTRACT: approved home collection HIV test and counseling service is 
now available to consumers. Manufactured by Direct Access Diagnostics, 
a Johnson & Johnson company, CONFIDE has a price point in the $30 to $40... 
...TEXT: doctors, pharmacists and other medical professionals so that they 
will then make recommendations to their patients to ■home test themselves. 
"This is a critical selling component for any of these health... 

... approved home collection HIV test and counseling service is^now 
available to consumers. Manufactured by Direct Access Diagnostics, a 
Johnson & Johnson company, CONFIDE has a price point in the $30 to $40... 

...the dried blood sample to the designated medical laboratory for analysis 
instructions on using the PIN to receive anonymous test results after 
seven days and professional counseling by telephone in complete anonymity 
Home Access... us to provide as much information and education about it as 
possible, " says Arisa Cunningham, director of marketing for Direct 

Access Diagnostics. "We are working in partnership with both retailers 
and professionals to provide additional information. . . 
COMPANY NAMES: 

Direct Access Diagnostics... 



23/3, K/6 (Item 1 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2003 The Gale Group. All rts. reserv. 

06615789 Supplier Number: 55677726 (USE FORMAT 7 FOR FULLTEXT) 
App Security Vaults To Fore . (Perf ecto Technologies 1 AppShield plug-and-play 
application security software) (Product Information) 

Yasin, Rutrell 
InternetWeek, pi 
Sept 6, 1999 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count: 759 

bypass security. 

PlanetRX.com, an online pharmacy, is using AppShield to maintain the 
privacy of patient medical information. Company executives declined to 
discuss their implementation in detail because they ! re in... 

...after hackers set up several Web sites to demonstrate how to access any- 
Hotmail user ID without a password . 
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The Java Virtual Machine bug, discovered by the Princeton University 
Secure, Internet Programming team, would. . . 

...Machado said companies need to do a better job of auditing and testing 
software, while access control tools can help in building security 
features into applications. Web servers like Apache, he said, provide 
access controls that developers can take advantage of when designing an 
application. 

Copyright [copyright] 1999 CMP Media... 



23/3, K/10 (Item 1 from file: 275) 

DIALOG { R) File 275: Gale Group Computer DB(TM) 
(c) 2003 The Gale Group. All rts. reserv. 

02173703 SUPPLIER NUMBER: 20537626 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Security solutions. (Question and Answer) 

Cobb, Michael 

e-Business Advisor, vl6, n5, p50(5) 
May, 1998 

LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 3209 LINE COUNT: 00260 

... in the UK being investigated after it sold an ex-demonstration 

computer that contained confidential patient files. We're about to 
upgrade most of our department's Windows 95 computers, which... 

...or when a Recycle Bin file is finally deleted), its clusters are merely 
abandoned. The directory entry is removed, and the operating system is 
told that the clusters are unallocated. But the ... Intranet using Microsoft 
Internet Information Server 3.0 and Microsoft Internet Explorer 3.0. We 
restricted access to the accounts area of the Intranet to the finance 
department, and everything worked fine... 

...user name anonymous, or a WWW (HTTP) request header may not contain a 
username and password . 

The user name of the anonymous account is IUSR. . . 

...BIGFOOT), and it's given a randomly generated password . The same 
anonymous user account is used by all IIS services. The account is made a 
member of . . . 

...behalf of a client request, the service impersonates the user by 
supplying the username and password pair. The anonymous user must have 
permission to read or execute the file, as determined by the Access 
Control List (ACL) associated with the file. {File and directory ACLs are 
configured using the Windows... 

...browsers will pop up a username and password dialog box. By sending the 
usename and password entered by the user, the browser can reissue the 
anonymous request as a request with credentials, that is a request 
containing a username and password ... IP address can be pulled from the 
server activity log, we use this code to deny- access to our pages: 
<% 

If request . servervariables ( "RENOTE. . . 

...and .IDC files in a separate directory from regular HTM files, and turn 
off the read permissions of the directory using Internet Service 
Manager. A serious security hole lets web clients download unprocessed .ASP 
files . . . 
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Hack attack 
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DIALOG (R) File 15: (c) 2003 ProQuest Inf o&Learning . All rts. reserv. 
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A beginner 1 s guide to demographics 
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06615789 Supplier Number: 55677726 

App Security Vaults To Fore. (Perfecto Technologies' AppShield plug-and-play 
application security software) (Product Information) 
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DIALOG (R) File 148:(c)2003 The Gale Group. All rts. reserv. 

07747892 SUPPLIER NUMBER: 16682216 

Seeing is believing, (biometrics security devices) 

23/AA,AN,Tl/8 (Item 2 from file: 148) 

DIALOG (R) File 148:(c)2003 The Gale Group. All rts. reserv. 

07314265 SUPPLIER NUMBER: 15262433 

Internet EDGAR. (Electronic Data Gathering and Retrieval System) (includes 
related articles on usage of online services) 



23/AA,AN,Tl/9 (Item 3 from file: 148) 

DIALOG (R) File 148:{c)2003 The Gale Group. All rts. reserv. 

06742538 SUPPLIER NUMBER: 14611149 

Networking in the 1 90s : the infrastructure emerges . (includes related 
articles on the systems of Kemper National, North Miami -Dade Community 
College, CAI/FRANS, and the Fred Hutchinson Cancer Research Center) 
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23/AA,AN,Tl/10 (Item 1 from file: 275) 

DIALOG (R) File 275: (c) 2003 The Gale Group. All rts. reserv. 

02173703 SUPPLIER NUMBER: 20537626 

Security solutions. (Question and Answer) 
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Set Items Description 

51 1084300 PATIENT? ? OR INPATIENT? ? OR OUTPATIENT? ? OR (SICK OR IN- 

JUR?? OR OPERATED OR OPERATION OR HOSPITALI ??? OR ELDER?? OR - 
OLD??) (4N) (PERSON? ? OR PEOPLE) 

52 8 649741 ACCESS OR ADMISSION OR ADMITTANCE OR ENTRANCE OR ENTRY OR - 

LOOK OR SEE OR READ 

53 367098 ((MEDICAL OR HEALTH OR HOSPITAL OR DOCTOR? ? OR CLINIC?? OR 

TREATMENT? ? OR HEALTHCARE) (3N) (RECORD? ? OR DATA OR INFORMA- 
TION OR INFO OR FILE? ? OR DOCUMENT? OR PAPER? ? OR REPORT? ?) 
OR CASEOHISTOR???) 

54 22 934 9 PASSWORD OR PIN OR (PASS OR SECRET) () (WORD? ? OR PHRASE? ? 

OR NUMBER? ?) OR PASSPHRASE OR PASSNUMBER OR (SECURITY OR ACC- 
ESS) () {CODE? OR KEY? ?) OR PERSONAL ( ) (IDENTIFICATION OR ID) ()- 
NUMBER 

55 632973 ( IDENTITY () (VERIF? OR VAL I DAT ? OR DETERMIN? OR CHECK??? OR 

CONFIRM??? OR PROV??? OR CERTIFY OR CERTIFI? OR SUBSTANTIAT? ) ) 
OR IDENTIFICATION OR ID 

56 ' 264058 ANONYMOUS?? OR UNIDENTIFIED OR (HIDE. OR HIDDEN OR CONCEAL?- 

?? OR SECRET) (2N) (IDENTITY OR NAME? ?) OR NAMELESS OR INCOGNI- 
TO OR UNNAMED 

57 590490 S2(4N) (CONTROL? ? OR CONTROLLING OR DIRECT??? OR MANAGE? ? 

OR MANAGING OR REGULAT??? OR MONITOR??? OR RESTRICT??? OR ALL- 
OW??? OR DENY??? OR DENIAL OR LIMIT? OR SUPERVIS??? OR OVERSE- 
E??? OR OVERSIGHT) 

58 15328 S5(3N) (NON OR "NOT" OR NO OR WITHOUT OR WITH () OUT OR ABSENT 

OR OMIT? ? OR OMITTING) 

59 278625 S6 OR S8 

510 1245 S7(S)S9 

511 69 S4(S)S10 

512 0 ■ S3(S)S11 

513 4 S3 AND Sll 

514 42715 S1(10N)S3 

515 1265 S7(S)S14 

516 581 S4(10N)S9 

517 0 S15 AND S16 

518 27 S4 AND S7 AND 9 AND S14 

519 1 S4 AND S9 AND S15 

520 9 S18 NOT PY>1999 

521 9 S20 NOT PD=19991 118 : 20030930 

5 22 8__ RD (unique items .) 

1 S23 " 13 S4 AND S7 AND S 9 AND SI 4 7 
S'24 — — — 8 S2-3-NOT-PY>T9'9"9" 

525 6 S24 NOT PD=1 99911 18 : 20030930 

526 6 RD (unique items) 
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26/3, K/l (Item 1 from file: 9) 

DIALOG i,R) File 9: Business & Industry (R) 
{c) 2003 Resp. DB Svcs . All rts. reserv. 

2214423 Supplier Number: 02214423 (USE FORMAT 7 OR 9 FOR FULLTEXT) 
Smart Cards and Biometrics Search for the Right Match 

(Biometrics and smart cards are working together in projects across a 
diverse range of applications, including a military base, a prison, at 
medical facilities, and in computer applications) 

Card Technology, p 50+ 
July 1998 

DOCUMENT TYPE: Journal ISSN: 0361-5561 (United States) 
LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 182 9 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

ABSTRACT: 

...Datacard Corp is working with Battelle Institute in providing biometric 
smart cards for use to control access to the medical supplies receiving 
dock at an Ohio correctional facility. Keytronic Corp (Spokane, WA. . . 

...ins; the keyboard will be sold in 1998. Keyware Corp (MA) is testing at 
an unnamed US medical center a biometric system based on recognition of a 
digitized image of the authorized person's face as well as a voice-print of 
the pass words , for access to highly confidential patient records. 
Recognition Systems Inc (CA) is working with hand. . . 

TEXT: 

...also has begun looking at smart cards and biometrics, thanks to its 
ongoing concerns about controlling access to medical supplies, says 
Minneapolis-based Datacard Corp.'s John Doyle, vice president of the... 

...a small correctional center in Columbus, Ohio. The system uses smart 
cards containing fingerprints to control access to the institute's 
medical supplies receiving dock. Doyle thinks part of the reason for... 

...introduced by the two U.S. legislators, part of which required "viable 
alternatives" for securing patient medical records . Biometric smart 
cards provide one such alternative. "Controlled substance distribution is a 
wide-open area. 

...of technologies. Massachusetts-based Keyware Corp. in April demonstrated 
a face/voice system for accessing hospital patient records at 
Faulkner & Gray's CardTech/SecurTech 1 98 Conference. Keyware f s software 
lets customers select one ... crucial, notes Licciardi. 

To use the system, doctors or other medical personnel will speak a pass - 
phrase three times into a terminal running the Keyware software. Then, 
their face will be photographed. The pass - phrase and photo will be 
digitized and stored in "about two or three K" of an. . . 

...will insert the smart card into a terminal, look into a camera and speak 
the pass - phrase . The doctor's speech and facial image will be compared 
to those on the smart... 

...a hand-geometry template. His company's hand readers were used with 
smart cards for access control at the 1996 Olympic Games in Atlanta. 
They currently are used at places as diverse... 

...one of the great conveniences of biometric stand-alones : the freedom 
from cards and personal identification numbers. 

A non -smart card facial recognition system that's been online since July 
1997 is used by. . . 
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. . . ejiafcles even the unbanked to cash checks without the need for picture ID 
or separate PIN , " says Doremus . Mr. Payroll and Wells Fargo Bank recently 
announced joint development of a facial... 

26/3, K/2 (Item 1 from file: 636) 

DIALOG (R) File 636: Gale Group Newsletter DB(TM) 
(c) 2003 The Gale Group. All rts. reserv. 

04108269 Supplier Number: 54003022 (USE FORMAT 7 FOR FULLTEXT) 
Public expectations have increased. 

Health Care Strategic Management, vl7, n2, pNA 
Feb, 1999 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count: 16001 

... points that most affect quality and outcomes. 

The hospital will be able to use the data to develop standardized 
medical decision guidelines, maximize patient outcomes, and eliminate 
treatment variances that produce less than optimal results. 

The goal is to. . . 

...allow patients to pay by credit card or ATM. Imprinted on each card is 
the patient 1 s insurance, blood type, and medical history information . 

Patients are responsible for updating their own cards, and can do so via 
paper form or . . . 

...card's magnetic stripe feeds into a database that enables the system to 
send each patient age and sex-pertinent health information . 

MemorialCare has launched the first phase of its program at 
Saddleback Memorial Medical Center in... can buy various levels of access to 
the online Health Profiles and then use a password to access the data. 

There is a dramatic variation in local cancer incidence rates and. . . 
offer a full line of Internet-based clinical decision support products. 

The new tool, CaduCIS Manager Query, enables clients to access 
simple calculated fields cases, mean mortality, mean length of stay, etc. 
as well as detailed. . . 

...information tools to clients. 

Using Picker's surveys, HBSI and Picker will offer a standardized 
patient survey that will link patient perception data with clinical , 
functional status and financial data. Both companies also plan to develop 
on-line access to... flow of this process* is frustrating to many health care 
professionals who are under increasing managed care pressure to see 
more patients in less time. 

Emergency cases only 20% of total 

And while the emergency ... the facility's patients. President Eva 
Maddox and her design team checked into the hospital anonymously and 
spent 24 hours gaining direct experience with what it was like to get 
around . . . 



26/3, K/3 (Item 2 from file: 636) 

DIALOG(R) File 636:Gale Group Newsletter DB(TM) 
(c) 2003 The Gale Group. All rts. reserv. 

03811030 Supplier Number: 48264215 (USE FORMAT 7 FOR FULLTEXT) 
NEW INTERNET SERVICE OFFERS SECURE HEALTH RECORD ARCHIVE 

Online Product News, vl7, n2, pN/A 
Feb 1, 1998 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count: 1467 
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( UJ3E ^FORMAT 7 FOR FULLTEXT) 
TEXT: 

...and their family members. For the first time ever, consumers will have a 
way to access and control all of their personal health information 
through this easy-to-use, responsive and secure system. . . 

allergies, immunizations, office visits, tests, treatments, a 
family health history as well as a personal health journal. Data can be 
input by physicians, patients and health plan providers. For example, 
physicians contribute medical data , while consumers can add personal 
notes regarding medications, side effects, as well as notes about... 

...case, consumers decide if they want the information to be automatically 
added to the Lifelong Health Record . 

"HealthCompass comes at a time when the traditional doctor- patient 
relationship is changing and when consumers are assuming greater 
responsibility in managing their own health... 

...own information. 

Users then receive a HealthCompass Identity comprised of three pieces 
of identification: a Personal Identification Number ( PIN ), a 
Signing Key and the Digital Certificate. The Signing Key and Digital 
Certificate are automatically. . . 

...Other information may be shared with them only if specifically 
designated by the consumer. 

— No anonymous contributions of information is possible. Consumers 
will be able to view the names of those ... CareCompass integrates 
administrative, clinical, financial and decision-support applications to 
meet all of a home health agency f s information management requirements. 
CareCompass enhances patient care through the use of personalized patient 
information and careplans, on-line patient educational materials... 



26/3, K/4 (Item 3 from file: 636) 

DIALOG (R) File 636: Gale Group Newsletter DB(TM) 
(c) 2003 The Gale Group. All rts . reserv. 

03788406 Supplier Number: 48205745 (USE FORMAT 7 FOR FULLTEXT) 
"HEALTHMAGIC" OFFERS CENTRALIZED HEALTH INFO RECORDS 

Worldwide Databases, vlO, pN/A 
Jan 1, 1998 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count: 1467 

{ USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

...and their family members. For the first time ever, consumers will have a 
way to access and control all of their personal health information 
through this easy-to-use, responsive and secure system. . . 
... allergies, immunizations, office visits, tests, treatments, a 

family health history as well as a personal health journal. Data can be 
input by physicians, patients and health plan providers. For example, 
physicians contribute medical data , while consumers can add personal 
notes regarding medications, side effects, as well as notes about... 

...case, consumers decide if they want the information to be automatically 
added to the Lifelong Health Record . 

"HealthCompass comes at a time when the traditional doctor- patient 
relationship is changing and when consumers are assuming greater 
responsibility in managing their own health... 

...own information. 

Users then receive a HealthCompass Identity comprised of three pieces 
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of identification: a Personal Identification Number ( PIN ), a 

Signing Key and the Digital Certificate. The Signing Key and Digital 
Certificate are automatically. . . 

...Other information may be shared with them only if specifically 
designated by the consumer. 

-- No anonymous contributions of information is possible. Consumers 
will be able to view the names of those ... CareCompass integrates 
administrative, clinical, financial and decision-support applications to 
meet all of a home health agency's information management requirements. 
CareCompass enhances patient care through the use of personalized patient 
information and careplans, on-line patient educational materials... 



26/3, K/5 (Item 1 from file: 810) 

DIALOG (R) File 810: Business Wire 

(c) 1999 Business Wire . All rts. reserv. 

0060991 BW604 

AIDS PRIVACY: As AIDS spreads, State Pc systems are reaching limits, 
according to Jeff Moad in Datamation Magazine 

August 17, 1987 

Byline: Business, Medical & Computer Editors 

...reporting directories, and 
there is a security log-on program on top of that to limit access to 
the system to six persons. The password is changed once every few 
weeks. 

Security Expenditures Pay Off 

According to Colorado officials, the... 

. . . the state 
system's cost. 

"The decision to go with confidential testing as opposed to 
anonymous testing and to have mandatory reporting has really put a 
burden on the system and. . . of f icials like Nickens are concerned that insura 
nee 

companies, lending institutions, or employers could improperly gain 

access to AIDS information and deny sufferers insurance, housing, and 
employment. Activists say discrimination against AIDS patients or 
even against those... 

...to city officials. 

Pressures Differ In Other States 

Unlike Colorado, most states currently support only anonymous 
testing. That means most states' computerized AIDS record-keeping 
systems aren't under as much... 

... is 

written to run on the IBM PC and incorporates an encoding device 
intended to hide the identity of AIDS patients. The code -- called 
Soundex — is a function of the patient's last... 

...had to do the same thing." 

The CDC opposes routine, confidential testing in favor of 
anonymous testing, says Morgan. "Even if you've got a perfect 
system, as soon as you ... sometimes not done so well. San Francisco attorne 
y Wood is currently 

representing several California AIDS patients who claim their doctors 
illegally made their files available to insurance investigators. 
AIDS advocates worry that once such information makes its way to... 



Caryn Wesner-Early EIC 3600 August 8, 2003 4 



...testing program is built around several different 

databases,.-- some on the same computers — to which password systems 
give access only to authorized persons. For example, after the DOD 
receives HIV test... 

. . . tested, 

along with a separate database of all those who tested positive for the 
virus. Direct access to the database of positive HIV tests is limited 
by the use of a password system, and identifications of individuals 
are disguised with a coding scheme. 
Using the coding scheme. . . 

...records, including HIV test results at Walter Reed Army Medical 
Center, are not protected with password or encoding systems and they 
are regularly read by unauthorized persons. 

Army officials have denied ... absolute, 
total secret . " 
The Army's HIV Network 

This fall, military hospitals will have more direct access to HIV 
test information. As part of a new program to match lists of blood. . . 



26/3, K/6 (Item 1 from file: 813) 

DIALOG (R) File 813: PR Newswire 

(c) 1999 PR Newswire Association Inc. All rts. reserv. 

1188516 NYW002 
HealthCompass Launched at Celebration Health 

DATE: November 19, 1997 08:00 EST WORD COUNT: 1,532* 

...and their family members. For the first time ever, consumers will have a 
way to access and control all of their personal health information 
through this easy-to-use, responsive and secure system. . . 

. . . allergies, immunizations, office visits, tests, treatments, a family 
health history as well as a personal health journal. Data can be input 
by physicians, patients and health plan providers. For example, 
physicians contribute medical data , while consumers can add personal 
notes regarding medications, side effects, as well as notes about... 

. . . case, consumers decide if they want the information to be automatically 
added to the Lifelong Health Record . 

"HealthCompass comes at a time when the traditional doctor 
relationship is changing and when consumers are assuming 
responsibility in managing their own health... 
...own information. 

Users then receive a HealthCompass Identity comprised of three pieces 
of identification: a Personal Identification Number ( PIN ), a 

Signing Key and the Digital Certificate. The Signing Key and Digital 
Certificate are automatically. . . 

...Other information may be shared with them only if specifically 
designated by the consumer. 

No anonymous contributions of information is possible. Consumers 

will 

be able to view the names of those... CareCompass integrates 
administrative, clinical, financial and decision-support applications to 
meet all of a home health agency's information management requirements. 
CareCompass enhances patient care through the use of personalized patient 
information and careplans, on-line patient educational materials... 
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ACCESS OR ADMISSION OR ADMITTANCE OR ENTRANCE OR ENTRY OR LOO 
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PASSWORD OR PIN OR (PASS OR SECRET) () (WORD* OR PHRASE* OR NUM 
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TI Patient control over access to their own 

medical information 
AU Bowen, J.W.; Andrews, J.E.; Morton, R. ; Patrick, T.B. 
CS Univ. Missouri-Columbia, Columbia, MO, USA 

SO American Medical Informatics Association, 4915 St. Elmo Avenue, Suite 401, 
Bethesda, MD 20814, USA; phone: (301) 657-1291; fax: (301) 657-1296; 
email: mailail.amia.org; URL: www.amia.org, Abstracts and full papers 
available in print or CD-ROM. Price $70. Poster Paper. 
Meeting Info.: 984 5045: A Paradigm Shift in Healthcare Information 
Systems: Clinical Infrastructures for the 21st Century (9845045). Lake 
Buena Vista, FL (USA). 7-11 Nov 1998. Canon, IDX, Oceania Inc., Lexical 
Technology. 
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